CVE-2025-14202

HighCVSS 8.2/10Last modified Oct 13, 2026

Description

A vulnerability in the file upload at bookmark + asset rendering pipeline allows an attacker to upload a malicious SVG file with JavaScript content. When an authenticated admin user views the SVG file with embedded JavaScript code of shared bookmark, JavaScript executes in the admin’s browser, retrieves the CSRF token, and sends a request to change the admin's password resulting in a full account takeover.

Metrics

CVSS 4.0 8.2/10CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:A/VC:H/VI:L/VA:N/SC:H/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Weakness enumeration

CWE-79

Affected software

No affected versions have been published.

Timeline

Published
Dec 18, 2025
Last modified
Oct 13, 2026
NVD status
Deferred

Related CVEs from 2025

CVE-2025-142038.8A flaw has been found in code-projects Question Paper Generator up to 1.0. This vulnerability affects unknown code of the file /selectquestiCVE-2025-142046.3A vulnerability has been found in TykoDev cherry-studio-TykoFork 0.1. This issue affects the function redirectToAuthorization of the file /.CVE-2025-142055.4A vulnerability was found in code-projects Chamber of Commerce Membership Management System 1.0. Impacted is an unknown function of the fileCVE-2025-142067.5A vulnerability was determined in SourceCodester Online Student Clearance System 1.0. The affected element is an unknown function of the filCVE-2025-142077.3A vulnerability was identified in tushar-2223 Hotel-Management-System up to bb1f3b3666124b888f1e4bcf51b6fba9fbb01d15. The impacted element iCVE-2025-142086.3A security flaw has been discovered in D-Link DIR-823X up to 20250416. This affects the function sub_415028 of the file /goform/set_wan_settCVE-2025-142099.8A weakness has been identified in Campcodes School File Management System 1.0. This impacts an unknown function of the file /update_query.phCVE-2025-14212.4Data provided in a request performed to the server while activating a new device are put in a database. Other high privileged users might doCVE-2025-142109.8A security vulnerability has been detected in projectworlds Advanced Library Management System 1.0. Affected is an unknown function of the fCVE-2025-142119.8A vulnerability was detected in projectworlds Advanced Library Management System 1.0. Affected by this vulnerability is an unknown functionaCVE-2025-142129.8A flaw has been found in projectworlds Advanced Library Management System 1.0. Affected by this issue is some unknown functionality of the fCVE-2025-142138.3Cato Networks’ Socket versions prior to 25 contain a command injection vulnerability that allows an authenticated attacker with access to th